30 Commits (master)

Author	SHA1	Message	Date
Mariano Cano	d037ed6ff2	Add provisioner id to acme accounts ... This commit adds a new field that allows to have a reference to a provisioner id in the acme account.	1 week ago
Max	7731edd816	Store and verify Acme account location (#1386) ... * Store and verify account location on acme requests Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com> Co-authored-by: Mariano Cano <mariano@smallstep.com>	11 months ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Herman Slatman	d82e51b748	Update AllowWildcardNames configuration name	2 years ago
Herman Slatman	2a7620641f	Fix more PR comments	2 years ago
Herman Slatman	7f9034d22a	Add additional policy options	2 years ago
Herman Slatman	a9f033ece5	Fix JSON property name for ACME policy	2 years ago
Herman Slatman	256fe113f7	Improve tests for ACME account policy	2 years ago
Herman Slatman	7df52dbb76	Add ACME EAB policy	2 years ago
Herman Slatman	ef16febf40	Refactor ACME EAB queries ... The ACME EAB keys are now also indexed by the provisioner. This solves part of the issue in which too many EAB keys may be in memory at a given time.	2 years ago
Herman Slatman	0afea2e957	Improve tests for already bound EAB keys	3 years ago
Herman Slatman	02cd3b6b3b	Fix PR comments	3 years ago
Herman Slatman	f31ca4f6a4	Add tests for validateExternalAccountBinding	3 years ago
Herman Slatman	492256f2d7	Add first test cases for EAB and make provisioner unique per EAB ... Before this commit, EAB keys could be used CA-wide, meaning that an EAB credential could be used at any ACME provisioner. This commit changes that behavior, so that EAB credentials are now intended to be used with a specific ACME provisioner. I think that makes sense, because from the perspective of an ACME client the provisioner is like a distinct CA. Besides that this commit also includes the first tests for EAB. The logic for creating the EAB JWS as a client has been taken from github.com/mholt/acmez. This logic may be moved or otherwise sourced (i.e. from a vendor) as soon as the step client also (needs to) support(s) EAB with ACME.	3 years ago
Herman Slatman	c6bfc6eac2	Fix PR comments	3 years ago
Herman Slatman	d44cd18b96	Add External Accounting Binding key "BoundAt" marking	3 years ago
Herman Slatman	f81d49d963	Add first working version of External Account Binding	3 years ago
max furman	6b8585c702	PR review fixes / updates	3 years ago
max furman	074ab7b221	[acme db interface] add linker tests	3 years ago
max furman	8d2ebcfd49	[acme db interface] more unit tests	3 years ago
max furman	80a6640103	[acme db interface] wip	3 years ago
max furman	2ae43ef2dc	[acme db interface] wip errors	3 years ago
max furman	121cc34cca	[acme db interface] wip	3 years ago
max furman	461bad3fef	[acme db interface] wip	3 years ago
max furman	088432150d	Beginnings of acmeDB interface	3 years ago
max furman	f34fb80eb6	[acme] Use lock for ordersByAccID and type to house methods	4 years ago
Mariano Cano	ba918100d0	Use go.step.sm/crypto/jose ... Replace use of github.com/smallstep/cli/crypto with the new package go.step.sm/crypto/jose.	4 years ago
max furman	704a510a2a	Remove non-pending orders from the acme_orders_by_account index ... ... - Each acme account has an index in this table. Before this change, the index would grow unchecked as orders accumulate. This change removes orders that have moved out of the 'PENDING' state.	4 years ago
max furman	e1409349f3	Allow relative URL for all links in ACME api ... ... * Pass the request context all the way down the ACME stack. * Save baseURL in context and use when generating ACME urls.	4 years ago
max furman	e3826dd1c3	Add ACME CA capabilities	5 years ago